Network Analysis
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| wu-tang.xyz | ||
| liverpooldabestteamoftheworld.com | 104.21.52.98 |
- UDP Requests
-
-
192.168.56.101:59369 164.124.101.2:53
-
192.168.56.101:61479 164.124.101.2:53
-
192.168.56.101:62324 164.124.101.2:53
-
192.168.56.101:137 192.168.56.255:137
-
192.168.56.101:138 192.168.56.255:138
-
192.168.56.101:49152 239.255.255.250:3702
-
192.168.56.101:61480 239.255.255.250:3702
-
192.168.56.101:62445 239.255.255.250:1900
-
192.168.56.101:62447 239.255.255.250:3702
-
192.168.56.101:62449 239.255.255.250:3702
-
52.231.114.183:123 192.168.56.101:123
-
GET
200
https://liverpooldabestteamoftheworld.com/liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-896040F2AF009D79EEF149564853AB30.html
REQUEST
RESPONSE
BODY
GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-896040F2AF009D79EEF149564853AB30.html HTTP/1.1
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41
Host: liverpooldabestteamoftheworld.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Wed, 17 Mar 2021 14:09:22 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d457a8800c5efbd25ef80bfd015975fc31615990162; expires=Fri, 16-Apr-21 14:09:22 GMT; path=/; domain=.liverpooldabestteamoftheworld.com; HttpOnly; SameSite=Lax; Secure
Last-Modified: Sun, 14 Mar 2021 09:55:50 GMT
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
cf-request-id: 08e21e1bbb000036787bbc3000000001
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=r3IhqIyM6oKpuKfvr4RoA5B29hgGpi5vA%2FfZdg75GupeiYbfHO17V0rsLb2kMtDYUF1wRGDivlLoVgKASQrCOk0827S0j%2BSGa0WUMB2DgFVwqRK4ujFAd4qVhmIqHa%2BRNE4%3D"}],"max_age":604800,"group":"cf-nel"}
NEL: {"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 6316cc72ca3c3678-LAX
alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400
GET
301
http://liverpooldabestteamoftheworld.com/liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-896040F2AF009D79EEF149564853AB30.html
REQUEST
RESPONSE
BODY
GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-896040F2AF009D79EEF149564853AB30.html HTTP/1.1
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41
Host: liverpooldabestteamoftheworld.com
Connection: Keep-Alive
HTTP/1.1 301 Moved Permanently
Date: Wed, 17 Mar 2021 14:09:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Wed, 17 Mar 2021 15:09:21 GMT
Location: https://liverpooldabestteamoftheworld.com/liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-896040F2AF009D79EEF149564853AB30.html
cf-request-id: 08e21e195b0000053c4f003000000001
Report-To: {"group":"cf-nel","endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=7Dr03wKErx6V%2BlxoHL%2Ff6CHb9wDm%2FOkxvMki9Sg9RnMWKmn55YPQcL0P2leEF6R%2FehFKGoqOwFUDQz54m5SL9Gql%2FwHHciN5xgD303U1e%2Fxhsqc7fs3ZUwBHfNmfFRQbZvw%3D"}],"max_age":604800}
NEL: {"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 6316cc6efd18053c-LAX
alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
| Flow | SID | Signature | Category |
|---|---|---|---|
| TCP 192.168.56.101:49199 -> 172.67.197.219:443 | 906200056 | SSLBL: Malicious JA3 SSL-Client Fingerprint detected (Tofsee) | undefined |
Suricata TLS
| Flow | Issuer | Subject | Fingerprint |
|---|---|---|---|
|
TLSv1 192.168.56.101:49199 172.67.197.219:443 |
C=US, O=Cloudflare, Inc., CN=Cloudflare Inc ECC CA-3 | C=US, ST=California, L=San Francisco, O=Cloudflare, Inc., CN=sni.cloudflaressl.com | ab:17:eb:ee:6d:34:64:f6:f9:9e:e3:79:1d:99:79:ad:e1:e7:73:e7 |
Snort Alerts
No Snort Alerts